US 11,886,818 B2
Method and apparatus for detecting anomalies in mission critical environments
Liora Braunstein, Tel Aviv (IL); Keren Cohavi, Tel Aviv (IL); Yoav Spector, Ramat Gan (IL); and Kiril Lashchiver, Kiryat Ono (IL)
Assigned to Intuit Inc., Mountain View, CA (US)
Filed by Intuit Inc., Mountain View, CA (US)
Filed on Dec. 28, 2022, as Appl. No. 18/090,229.
Application 18/090,229 is a continuation of application No. 16/710,581, filed on Dec. 11, 2019, granted, now 11,568,133.
Claims priority of provisional application 62/777,781, filed on Dec. 11, 2018.
Prior Publication US 2023/0237265 A1, Jul. 27, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 40/284 (2020.01); G06F 40/205 (2020.01); G06F 40/237 (2020.01); G06V 30/414 (2022.01); G06F 18/21 (2023.01)
CPC G06F 40/284 (2020.01) [G06F 18/21 (2023.01); G06F 40/205 (2020.01); G06F 40/237 (2020.01); G06V 30/414 (2022.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
isolating a protocol language of a data set comprising a text structure representing data regarding a network communication procedure between a plurality of user devices, wherein the protocol language comprises a pattern for implementing the network communication procedure;
generating a document from the data set, wherein the document includes a text structure,
organizing, in light of the protocol language, the text structure into a natural language scheme by organizing ngrams in the text structure in one or more sequences in which the ngrams occur during the network communication procedure for the protocol language;
detecting, using the natural language scheme, insights in the document, wherein the insights comprise a likelihood of certain ngram sequence orderings of the ngrams during the network communication procedure in the protocol language; and
generating a rule from the insights, wherein the rule comprises returning a detection of an anomaly when the certain ngram sequence orderings are violated in subsequent network communications using the protocol language.